At Nutrition with Carmen, your privacy is respected and your personal information is protected in compliance with the General Data Protection Regulation (GDPR) and the Maltese Data Protection Act (Chapter 586 of the Laws of Malta).
Who we are
Nutrition with Carmen is the trading name of Carmen Silvia Flucus, a qualified Nutritional Therapist based in Malta, member of the Association of Naturopathic Practitioners (ANP), United Kingdom. For the purposes of GDPR, Carmen Silvia Flucus is the data controller responsible for your personal information.
- VAT number: 3251-1231
- Business address: Ta'Wejda Building, Triq it-Torri, fl 9, Mosta, Malta
- Email: carmen@nutritionwithcarmen.eu
- Website: nutritionwithcarmen.eu
Information we collect
- Personal details: name, address, email, phone number, country of residence.
- Health and lifestyle information, collected via forms, questionnaires, and consultations.
- Payment details, processed securely through Practice Better. We do not store your full card details.
- Consultation notes, recommendations, and any test results or medical documents you choose to share.
- Website usage data through cookies and analytics (see the Cookies section below).
Lawful basis for processing
Contract. To deliver the nutritional therapy services you have booked.
Explicit consent (GDPR Article 9). Health information is a special category of personal data. We collect and process it only after you have given clear, written consent.
Legal obligation. To keep records required for tax, insurance, and professional compliance.
How we use your information
- To provide personalised nutritional and lifestyle advice.
- To manage communication relating to appointments and services.
- To maintain professional and legal records as required by the ANP and our insurer.
- To send appointment reminders and, where you have separately consented, occasional educational content.
Sharing of information
Your personal information will never be shared with third parties without your express consent, except where required by law. We work with the following trusted processors, all bound by data protection obligations:
- Practice Better. Our practice management platform, used for bookings, intake forms, secure messaging, and your records.
- Email and hosting providers, payment processors, and our accountant, on a need-to-know basis.
- Our professional indemnity insurer or the ANP, only in the event of a complaint or claim.
International data transfers
Some providers, including Practice Better, may store data outside the European Economic Area, for example in Canada or the United States. Where this happens, appropriate safeguards such as European Commission Standard Contractual Clauses are in place. You can request details by contacting us.
Data retention
Personal data is securely stored and retained for a minimum of 7 years following your last consultation, after which it is safely deleted unless we are legally required to retain it longer. Financial records are kept for 9 years in line with Maltese tax law.
Cookies
This website uses a small number of cookies to function properly and to understand how visitors use it. The categories of cookies are:
- Essential cookies. Required for the website to function. These cannot be disabled.
- Analytics cookies. Help us understand how visitors find and use the website, so we can improve it. These are optional and only set if you give your consent.
You can control cookies through your browser settings at any time. Disabling cookies may affect how the website functions for you.
Your rights
Under GDPR, you have the right to:
- Access the personal data we hold about you.
- Request corrections to inaccurate or incomplete data.
- Request deletion of your data, subject to legal obligations.
- Restrict or object to processing.
- Receive your data in a portable, machine-readable format.
- Withdraw consent at any time, without affecting prior lawful processing.
To make a request, contact carmen@nutritionwithcarmen.eu. We respond within 30 days.
Right to complain
If you believe your data has not been handled correctly, you can complain to the Maltese Information and Data Protection Commissioner (IDPC):
- Website: idpc.org.mt
- Email: idpc.info@idpc.org.mt
- Phone: +356 2328 7100
Changes to this policy
We may update this Privacy Policy from time to time. The most recent version will always be available on this page, with the "last updated" date shown at the top.
Contact
If you have any questions about this Privacy Policy or how your information is handled, please contact carmen@nutritionwithcarmen.eu.